JP2010537334A - Method and apparatus using operation mode for preventing unauthorized use of non-contact portable device by owner - Google Patents

Abstract

In the present invention, when the holder of the non-contact type portable object 11 does not change the state of at least one sensor 14 of the non-contact type portable object in a specific method and a specific position, the non-contact type portable object 11 The present invention relates to a method and apparatus for preventing establishment of radio frequency communication 13 between contact type objects 12. One of the objects of the present invention is to prevent a non-contact type portable object from being used without the owner's permission.
[Selection] Figure 1

Description

  The present invention relates to a method and apparatus using an operation mode for preventing unauthorized use of a non-contact type portable device, and more particularly, between a first non-contact type portable object and a second non-contact type object. The present invention relates to a method and apparatus for preventing (radio frequency) communication from being established without the permission of the holder of the first contactless portable object.

Certain non-contact portable objects such as IC cards are powered and operated remotely. Such power supply obtains the energy required for operation from the electromagnetic field generated and transmitted from the card reader trying to communicate. In this electromagnetic field, data exchange is performed between the card and the reader during so-called radio frequency communication.
Therefore, such an electromagnetic field is necessary and sufficient for both supplying power to the IC card and establishing communication between the reader and the card.

  In any case, the non-contacting portable object has no link or physical contact with the non-contacting object used as a reader. Therefore, the two objects cannot directly face each other.

In the situation as described above, it becomes possible to poll a non-contact type portable object without being noticed and / or unauthorized by the owner (generally the owner), and a new one for the non-contact type portable object. It is a problem as a threat.
There are the following two threats to non-contact portable objects.
-Privacy infringement-Fraud

  Privacy infringement mainly occurs in the field of electronic identification. In fact, if a non-contact portable object (for example, an electronic ID card) is activated without the owner's permission, the Service-to-Self can acquire all or part of the information in the ID card.

  A fraudulent threat exists when executing a transaction of an electronic portable object. For example, a transaction such as an electronic signature, electronic authentication, and electronic payment may be executed without permission of the owner.

  More specifically, by using a relay point that connects the communication between the card and the reader, the distance between the reader and the card is increased, so that a non-contact type portable object (for example, a card) is used without permission of the owner. It is also conceivable.

  For example, when an individual possesses a card with a contactless payment function, the criminal performs a payment transaction without noticing the holder, and thus uses the characteristic of a subway that can approach the vicinity. Therefore, the criminal can bring an object used as a card reader (for example, a modified personal information terminal (PDA)) close to the personal card. At a distance, another criminal brings an object (eg, a modified personal information terminal (PDA)) used as a card that corresponds to the modified reader closer to a genuine reader (which can legally make payment transactions). .

  When communication between both modified PDAs is established, for example via Bluetooth®, Wi-Fi or Internet connection, the actual communication from the personal card to the modified reader and the actual communication from the authentic reader Can be transmitted to a modified card. Then, despite the distance between the two modified objects, the paired criminals can execute the transaction without the permission of the card holder.

The above problems can be solved by existing methods.
Hereinafter, in the present specification, specific contents of a non-contact type portable object, that is, a non-contact type IC card will be described. The non-contact type object that communicates with the card in question is represented by a general term “reader”. The above expression is an example, and does not limit the technical scope of the present invention, and can be applied to all non-contact portable objects such as passports, electronic terminals, and mobile phones.

As a method already implemented in order to solve the above-mentioned problem, there is a method of blocking the use of a non-contact type card unless the user presses a button attached to the card.
However, it is very difficult to implement this solution while maintaining the constraints imposed by ISO as defined in ISO standards 7816-1 and ISO7816-2.
Furthermore, this solution, in addition to the high manufacturing costs, significantly changes the push button reliability with time.

In addition, a solution has been devised in which the card is inserted into a metal case made of a metal having an electromagnetic wave shielding property, thereby preventing the card from being used accidentally.
The main drawback of this solution is that it imposes restrictions on the user. In fact, even a legitimate holder cannot use the card without removing it from the case. These limitations are contrary to the “Tap and Go” (registered trademark) principle. “Tap and go” is the principle by which the cardholder's natural and fluid actions and transactions are merged. Its primary aim is not to force the user to wait.
The aim is achieved as a result of very quick transactions, such as transactions that should be completed in less than 0.25 seconds in transit. In addition, such transactions must be performed in a contactless mode so that the user can use the card through a wallet, bag or pocket, and more specifically, the user does not need to insert the card into the reader. I must.
Therefore, having to remove and insert a card from a closed case must “interrupt” the user's movement, which contradicts the above principle.

  Yet another solution is to impose an obligation on the card user to additionally present an identification element, such as a cipher, to the reader in order to validate the transaction between the contactless card and the reader. For example, taking a passport as an example, there is a method in which a contactless reader is first read, and then a number written on the main body of the passport is requested to be input with a keyboard of the reader. However, this solution is also contrary to the “tap and go” principle. In addition, since the physical contact between the user and the reader is required to enter information, the solution is similar to the solution for unauthorized use of contact cards, and thus benefits from being a contactless transaction. It will decrease.

  The present invention provides an alternative solution to the above-mentioned drawbacks and has advantageous effects.

  The present invention provides a non-contact type portable object when the holder of the first non-contact type portable object does not change the state of at least one built-in sensor of the first non-contact type portable object in a predetermined method and a predetermined ratio. The present invention relates to a method and an apparatus for preventing establishment of radio frequency communication between an object and a non-contact type object.

  In this specification and in the claims that follow, the term “state” is used to indicate one or more physical values measured by one or more sensors provided on or within the card body. The And the state of the object is indicated by its position in space, and can be indicated by the movement, temperature, or physical structure (strain) of the object, or any measurable value. .

  The term “mode of operation” is used to indicate a change in state of a measurable object. This term is specifically described as “spontaneous movement mode”, which indicates a change in the state of an object due to the positive movement of the holder.

More precisely, in the invention described in the claims, the radio frequency communication between the first non-contact portable object and the second non-contact object is established without the permission of the owner of the first non-contact portable object. A method is provided to prevent this from happening. The method includes the following steps.
A detection step of detecting an operation mode indicating a change in state of the first non-contact portable object;
A collation step of collating the detected motion mode with a reference value of the motion mode stored in a memory in the first non-contact portable object to calculate a similarity value;
A determination step of determining whether or not to permit establishment of the communication when the similarity value generated in the verification step reaches an approval level value;

The present invention can check whether the holder intends to establish the radio frequency communication while performing the radio frequency communication of the first non-contact portable object.
Therefore, to prove the owner's consent, the mode of operation should be defined so that it can be reproduced by the owner.

As a simple embodiment of the present invention, a simple position sensor for sensing whether an object is vertical or horizontal is provided on the portable object.
The required operation mode is, for example, “change in the vertical direction”. At this time, any change of the sensor fixed in the vertical direction can be the required operation mode.

  By measuring not only the state of the object but also the change in state, it is possible to prevent communication from being established when the object happens to be in the correct state. In fact, when measuring only the position of an object in space, if the object is level (for example because it is placed on a table), any communication is permitted without the owner's consent.

  Instead of detecting the position of an object in space, this embodiment analyzes the motion of the object. In this case, a sensor suitable for the object is provided, and it is necessary to create a predetermined operation for permitting establishment of communication. The predetermined operation is preferably a relatively complicated operation in order to prevent accidental occurrence.

  Similarly, it is also possible to measure the temperature of an object to make an operation mode. For example, when the portable object is an IC card, the pressure of the thumb is naturally transmitted to the card surface when the card is held. Therefore, the temperature at the contact point with the finger approaches the body temperature of the finger. When the object has a temperature sensor that can be measured accurately, the temperature change on the object surface (for example, a change that rises stably toward about 35 ° C.) may occur when the holder holds the card in hand. It is a good and reliable value that indicates that the card is willing to execute the transaction. In a more improved embodiment, several temperature sensors are installed in the body of the object and require a change in operating mode, for example to rise to stabilize towards about 35 ° C. It can also be set to be detected only at a place.

  In other embodiments, the measurement can be based on distortions in all or part of the portable object body. In this case, it is necessary to have one or a plurality of sensors capable of detecting distortion in the main body or at least a predetermined location of the main body. The required operation mode is, for example, a change in distortion at a predetermined angle from a predetermined direction.

  Whatever value is selected as the operation mode, it is essential to have a reference value so that it can be compared with the candidate operation mode.

  In a simple embodiment, this reference operation mode is recorded and stored in advance. However, in another embodiment, the reference operating mode of the present invention may be calculated rather than recorded. In either use, for example, the applied operation mode is projected on the screen and the validity is examined, or when the portable object is an electronic terminal, it is reproduced when radio frequency communication is about to start. A series of actions should be displayed on the screen. On a touch screen, the pattern to be followed to allow a transaction may appear on the screen.

Now, although the candidate operation mode and the reference operation mode have been described so far, these must be compared. The comparison method varies depending on the value of the operation mode. For example, with respect to motion, it can be measured by the position, velocity or amplitude of motion of the object. When the reference value is defined, the object calculates a similarity value indicating “quality” of the candidate motion mode with respect to the reference motion mode.
If the similarity value reaches a certain level, the communication is permitted.

  In another embodiment, the threshold permissions may be calculated rather than pre-defined. In this case, for example, when a reader connection is attempted, the card may apply a calculation function. The calculation function can also take into account information such as the strength and amplitude of a signal generated during connection.

  Therefore, in a situation where the requested connection is extremely weak or the signal fluctuates significantly, it is easy to be fraudulent, so the approval level value can be very high. On the other hand, if the requested connection is strong and the signal is stable, the approval level can be lowered.

  A further advantage of the present invention is that the mode of operation required by the card can be kept secret. In this case, the present invention can provide a higher security level. In fact, the present invention can reproduce a system close to an identification code (also called a PIN code) currently used in the connected mode in the non-contact mode by complicating the operation mode to be selected. .

  Another advantage of the present invention is that multiple modes of operation can be combined, thus further improving the security level.

Yet another advantage of the present invention is that the mode of operation can be adapted to the user. Actually, the reference operation mode can be adapted according to the user, and the complexity can be reduced as much as possible.
For example, in the case of a motion sensor, the natural movement of a 15 year old is very different from the natural movement of a 85 year old.

  As a specific example of combining a plurality of sensors, it is conceivable that a certain user can use one type of sensor (for example, a motion sensor) and another user can use another type of sensor (for example, a pressure sensor).

  Other features and advantages of the present invention will become apparent with reference to the following description and drawings. The following information does not limit the invention.

The figure which showed the system which can detect the change of a state with a non-contact portable object. 1 is a block diagram illustrating an embodiment of a method according to the present invention.

FIG. 1 shows a non-contact portable object 11 that includes a sensor 14, a memory 15, and a processor 16.
This figure further shows a non-contact object 12 which will be described in more detail later.
Both objects can communicate via the radio frequency wave 13.
The sensor 14 of the non-contact type portable object 11 can measure a change in the state of the object 11. Such a change is referred to herein as an operation mode.
Upon receiving a request from the non-contact type object 12, the non-contact type portable object 11 permits the connection 13 unless the processor 16 determines that the value detected by the sensor and the reference value stored in the memory 15 are sufficiently similar. Or do not hold.

  In an exemplary embodiment of the invention, the contactless portable object is an electronic ID card in a jacket pocket, handbag or wallet. In addition, the card includes several accelerometers and inclinometers that make up the sensor 14. Here, it is assumed that the movement from the left to the right immediately after the card is moved from the right to the left in the horizontal direction is stored in the memory 15 as the standard operation mode. The approval level is measured with S. In this example, the motion mode comparison function takes into account the angle measured by the sensor, the amplitude of motion, the average speed, and the instantaneous speed of the moment.

Thus, when the card is requested by the reader to be communicated by the reader without authorization (eg, in public transport), the sensor 14 is activated and analyzes the operation and location of the card. At this point, very few operations such as those described above are naturally performed. The processor then compares the value measured by the sensor with a reference value. Here, it is assumed that the processor does not sense that the card is in the horizontal direction, only senses movement from left to right, and does not sense movement from right to left. In the verification stage, a similarity value IS1 is calculated in this example.
In the determination step, the similarity value IS1 is compared with a predetermined level value S. In this embodiment, since the level value S is not reached, the processor does not permit establishment of communication with the reader.

Still, in this embodiment, when the user desires to use the card, the holder brings the card close to the reader, activates the reader, and activates the sensor 14.
Next, the user moved the card from the right to the left in the horizontal direction and immediately moved from the left to the right in the horizontal direction to reproduce the prescribed operation mode.

The processor compares the value measured by the sensor with a reference value and calculates a similarity value. In this example, the sensor recognizes the horizontal position of the card and the correct card movement from right to left and from left to right. Then, the similarity value IS2 is calculated at the collation stage.
In the determination step, the similarity value IS2 is compared with a predetermined level value S. When the standard value is reached, the processor permits establishment of communication with the reader.

  FIG. 2 is a block diagram illustrating an embodiment of a contactless portable object according to the method of the present invention. This figure shows a standby stage 21, an external information detection stage 22, a collation stage 23, a decision stage 24 that functions as a result of collation, and a radio frequency communication establishment stage 25.

  When the connection is about to be received, the portable object moves from the standby stage 21 to a detection stage 22 for detecting an operation mode that is a change in state via a built-in sensor. This operation mode is a change in operation, position, or distortion, or any information that can be measured by a portable object and can be intentionally changed by the user. In a specific embodiment of the present invention, a fixed time limit may be provided at this detection stage, or it may end when one or more sensors measure a minimum amount of information. When the detection stage is completed, the portable object proceeds to the next collation stage 23 where information sensed by the sensor is compared with a reference value. Hereinafter, the comparison result is referred to as a similarity value. The similarity value is preferably a percentage. Once the similarity value is calculated, the portable object proceeds to decision step 24. In the decision stage, the portable object checks whether the similarity value reaches the level value S or not. If the standard value has been reached, the portable object proceeds to the radio frequency communication establishment stage 25. At this stage, the portable object accepts the radio frequency communication and performs the normal requested transaction.

  On the other hand, if the similarity value does not reach the level value S in the decision step 24, it means that the non-contact type object is not in a state of performing the requested action. That is, it is presumed that the card was activated without the holder's permission. In this case, radio frequency communication is rejected and the object returns to the standby stage 21.

As a specific embodiment of the present invention, after detecting that the card has been activated without the owner's permission, the card may make one or more of the following example decisions.
-Record the request for the connection.
-Accept communication but intentionally do so in protected mode. For example, only a small amount of information that is not confidential information is emitted, or only incorrect information is emitted.
-Decide to erase all or part of the stored information.
-Show other reactions.

11: Non-contact type portable object 12: Non-contact type object 13: Radio frequency communication 14: Sensor 15: Memory 16: Processor

Claims (13)

The radio frequency communication (13) between the first non-contact portable object (11) and the second non-contact portable object (12) is established without the permission of the owner of the first non-contact portable object (11). A method for preventing, wherein the method comprises:
A detection step of detecting an operation mode indicating a change in state of the first non-contact portable object;
A collation step of collating the detected operation mode with a reference value of the operation mode stored in the memory (15) in the first non-contact portable object, and calculating a similarity value;
A determination step for determining whether to permit establishment of the communication when the similarity value generated in the verification step reaches an approval level value S;
A method comprising the steps of:   The method according to claim 1, wherein the operation mode is a change of a predetermined position in at least a space.   The method according to claim 1, wherein the operation mode is at least an operation change.   The method of claim 1, wherein the mode of operation is at least a change in temperature.   The method of claim 1, wherein the operational aspect is at least a change in distortion.   6. The method according to claim 1, wherein the approval level value S is preset and stored in a memory of the first contactless portable object.   6. The method according to claim 1, wherein the approval level value S is calculated.   The method according to claim 1, wherein the first non-contact type portable object is a non-contact type IC card. A first non-contact portable object (11) capable of communicating with a second non-contact object (12) via radio frequency communication (13),
At least one sensor (14) for detecting an operation mode indicating a change in state of the first non-contact portable object;
The radio frequency communication is established when a similarity value between the operation mode detected by the sensor and a reference operation mode stored in the memory (15) in the first non-contact portable object reaches a certain level. A processor (16) that permits
A first non-contact type portable object comprising:   The first non-contact portable object according to claim 9, wherein the sensor is a motion sensor.   The first non-contact portable object according to claim 9, wherein the sensor is a temperature sensor.   The first non-contact portable object according to claim 9, wherein the sensor is a strain sensor.   The first non-contact type portable object according to any one of claims 9 to 12, wherein the first non-contact type portable object is a non-contact type IC card.

Images